Medium · 5.3 CVE-2026-32565 EUVD-2026-12812GHSA-g4c7-xf45-99hx

WordPress Contextual Related Posts plugin < 4.2.2 - Broken Access Control vulnerability

Published Mar 18, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Vendor: ajay Product: Contextual Related Posts

Description

Missing Authorization vulnerability in Ajay Contextual Related Posts contextual-related-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contextual Related Posts: from n/a through < 4.2.2.

Affected products

Vendor	Product	Affected	Fixed
Ajay	Contextual Related Posts	≤ 4.2.2	—

References

https://patchstack.com/database/Wordpress/Plugin/contextual-related-posts/vulnerability/wordpress-contextual-related-posts-plugin-4-2-2-broken-access-control-vulnerability?_s_id=cve vdb-entry